npm/@auth0/nextjs-auth0 CVE-2025-46344: medium 4.9, EPSS 0.44%
Auth0 NextJS SDK v4 Missing Session Invalidation
Action: Upgrade @auth0/nextjs-auth0 to 4.5.1 or later.
npm i @auth0/nextjs-auth0@4.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.1 | 4.5.1 | - |
Fixed versions
| 4.5.1 |
Sources
- osv: GHSA-pjr6-jx7r-j4r6
- nvd: CVE-2025-46344
- https://github.com/auth0/nextjs-auth0/security/advisories/GHSA-pjr6-jx7r-j4r6
- https://github.com/auth0/nextjs-auth0/commit/a4f061aed02ffa132feca8adfbd11704df17e1c3
- https://github.com/auth0/nextjs-auth0
- https://github.com/auth0/nextjs-auth0/releases/tag/v4.5.1
CVE-2025-46344 · published · modified · JSON